|
|
|
|
|
by StupidOne
2970 days ago
|
|
Problem is, if we take it to extreme, we are basically playing Cluedo game.
Is "18 year old" PII? - no
Is "orders pizza every Friday" PII? - no
Is "always misspells word cheese" PII? - no
Is "leaves 10% tip" PII? - no
Combine it and you have PII. |
|
Just because something it murky, doesn't mean businesses get to ignore it. The entire point is to force companies to actually think about what their data is and decide if they need to store PII. If they do it have implications. Have a reasonable explanation for choices, and are willing to rectify issues pointed out by consumers and/or DPA.